Two substrates
Rollout memory is the immediate conversation transcript — durable but case-scoped. Curated memory (packages/memory) is the long-term store: typed MemoryRecord entries with applicability bounds, citations, and validation lineage. The agent decides what to consolidate at the end of a case.
Applicability bounds
Every memory record carries typed bounds — solver family, physics regime, geometry class, mesh-quality range, the validation evidence that supports it. Recall is filtered against the new case's properties so you don't reuse a Re=10 viscous claim in a Re=10⁶ turbulent flow.
Cite-cascade invalidation
ADR 0028 freezes the cross-case invalidation invariant: if a memory record is retracted or amended, every downstream case that cites it is flagged for review. Trust travels with provenance, not stale assertions.
Tenant scope and privacy
Memory respects the data-classification model (ADR 0004). A tenant-restricted memory record never crosses into another tenant's recall. The platform supports BYOK encryption keys for tenants who require it.